WESM zl Management and Configuration Guide WT.01.28 and greater

1-40
Introduction
ProCurve Wireless Edge Services zl Module
• The Wireless Edge Services zl Module receives the traffic on its uplink port
from the wireless services-enabled switch; the traffic is tagged for the
VLAN interface.
■ You can apply one IP ACL and one MAC extended ACL to each physical
interface.
The two physical interfaces are the internal uplink and downlink ports. The ACL
applies to all traffic that arrives on the port in any VLAN. In addition to imposing
other filters, an ACL applied to the downlink port can filter traffic according to
WLAN.
To control traffic that arrives on the downlink port with a MAC extended ACL,
the Wireless Edge Services zl Module examines the 802.11 header and the
Ethernet header after the packet is bridged. For traffic that arrives on the uplink
port, the MAC extended ACL applies to the Ethernet header.
Figure 1-15 shows where ACLs affect traffic. For more information about ACLs, see
Chapter 7: “Access Control Lists (ACLs).”
Figure 1-15. Applying ACLs to Interfaces